pkg/api/{api.go,cert.go,config.go}, cmd/menshen/main.go - add env for ovpn client crt expiry, fix error handling in CertWriter